cve.bz

CVE-2018-15610

8.8 highEPSS 1.8%

High (8.8) in avaya ip office. EPSS 1.8% chance of exploitation in the next 30 days.

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.

Severity

CVSS 3.0

8.8 high
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWEs
CWE-22, CWE-284
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON